unify totp check

the totp check is done in several places causing errors like 3552232e99

* ldap (addon)
* accesscontrol (dashboard)
* proxyauth
* directoryserver (exposed ldap)
* externalldap (the connector)

The code also makes externalldap auto-create work now across all the cases where there is a username

src/routes/test/users-test.js

@@ -175,7 +175,7 @@ describe('Users API', function () {
         });
 
         it('did set password of created user', async function () {
-            await users.verify(userWithPassword.id, userWithPassword.password, users.AP_WEBADMIN);
+            await users.verify(userWithPassword.id, userWithPassword.password, users.AP_WEBADMIN, {});
         });
     });
 
@@ -445,7 +445,7 @@ describe('Users API', function () {
         });
 
         it('did change the user password', async function () {
-            await users.verify(user.id, 'bigenough', users.AP_WEBADMIN);
+            await users.verify(user.id, 'bigenough', users.AP_WEBADMIN, {});
         });
     });