check TOTP code at time of registration