Replace otp_secret_key with otp_auth_key.
Replace step1_token with otp_auth_key. Remove mobile uniqueness check... If you try to register an existing mobile it will assume you just meant to login instead.
When a user authenticates, we send back the user object and push it into the store.
Fix syntax and test failure.