Session support for multi-factor authentication

This allows clients to bypass the second factor of authentication for a specified period of time after successful multi-factor auth. On successful auth, the server generates a token which the client must present for future sessions. See https://wiki.mozilla.org/Security/Mentorships/MWoS/2014/OpenVPN_MFA#Session_Support_Implementation_Details for usage and implementation details.