Notes on one time passwords.
http://www.smete.org http://alpha.smete.org/actions/otp/login.jhtml?smete_otp=XXX returns username (has an @ in it) or empty string