Sanity checks for missing res or otp

Returns null or false for instances when either req or otp is missing or if the otp length is < 32.