[BUG] OTP Errors

[seaerchin]

Problem

OTP errors are not differentiated and are all treated equally as being invalid OTPs (meaning that eg: ground truth value is 0000 but entered value is 1111), even when some OTPs are expired.

For a clear example of this, see src/routes/v2/authenticated/users.ts, line 104, where we call the verifyOtp method and if it fails, returns a generic BadRequestError instead of attempting to further distinguish the error.

Suggested solution

1. distinguish the error at totpGenerator
2. return diff error messages based on the above