forget pass is not needed for OTP mode