Require password to enable TOTP