Currently, we rely on dev.samstevens.totp for TOTP generation, that seems not maintained. Evaluate if we can include inside the IAM code base what is used, or replace it with another well maintained library.