Implements OTP replay protection, by storing the most recently used tokens for every user. Fixes issue #4 (closed).