Extracts blankTest and badHashTest to test_helper.js
More totp tests, adds blank key check
Filled out "does not update totpKey" test
Extracts app.js into controller files