Cross-device WebOTP