add totp to withdrawal and get api creds

totp cleanups. seems to work with oathtool locally, but not with google authenticator.

verify_totp returns false on bad totp, not an error

attempt at adding totp enable/verify/disable to UI

specify the compiled coffeescript js

fix returning signature and otp from onchallenge

Added otp parameter to authenticate.

Merge branch 'master' of https://github.com/MimeticMarkets/sputnik

import CancelledError and process parameter updates better

Merge branch 'master' of https://github.com/MimeticMarkets/sputnik

keep javascript local

don't set the deviation penalty to infinity on neg balance -- rely on constraints

fix config file setting

add getOHLCVHistory

Revert "start on fair_price optimization, ie find the fair_price where we are indifferent to buying or selling on the target exchange."