totp: Allow users to let us 'remember' them, so they do not have to supply a 2FA key on every login

A cookie is set and their ip is remembered, they only have to supply a key once every 10 days on the same computer/ip