Idiot proof TOTP enabling.

Make sure TOTP is working before enabling it.
Merge pull request #3 from mrmonday/safe-otp-enable

Idiot proof TOTP enabling.