Notes on one time passwords.
1: http://www.smete.org 2: http://alpha.smete.org/actions/otp/login.jhtml?smete_otp=XXX 3: returns username (has an @ in it) or empty string