One-time passwords have become a common method to restore consumer access to apps, but they are vulnerable to hacks.