add a method to test passwords even if OTP is enabled

This method is meant to be used for auxiliary authentication for
privileged operations where the user is asked for his current
password (like a password change).