Support authorising accounts which use 'one time passwords'

...because you are using them too, right? Right? :)

Hope you don't mind I 'tidied' the code a little in the second commit but feel free to throw it away if deemed not necessary (or wrong).