Add ability to store multiple secrets per user

Alternative secrets are stored in the same database table, with the
username schema: "$USERNAME/suffix", where suffix can be any unique
string, but should probably be chosen in a meaningful way to identify
which device the key belongs to.

Please note that this linearly decreases the security of the 2fa
solution, because it accepts twice as many HOTP-keys when a second key
is added.