logdb login works by token. only the user can see otp seed its owner.