Login, OTP, signup and password recovery are now handled from this single owner-owned module.
OTP is stored in owner-only audit records and is valid for 15 minutes.