fix(auth): verify otp using token hash (#451)

fix(auth): verify otp using token hash (#451) #108