notes on onetime password