Add ability to verify an OTP

https://www.pivotaltracker.com/story/show/78629110
NonceGenerator is enough. No need to expose internals via the classname :wink: