Production setup will require OTP after password verification.