tests: journalist: compare OTP with secret
tests: journalist: compare OTP with secret

The user.hotp/totp property always return a new HOTP/TOPT instance
therefore

    user.hotp != user.htop

is always true. Compare the secret instead.

micahflee/securedrop,conorsch/securedrop,conorsch/securedrop,heartsucker/securedrop,conorsch/securedrop,garrettr/securedrop,micahflee/securedrop,ehartsuyker/securedrop,micahflee/securedrop,micahflee/securedrop,garrettr/securedrop,garrettr/securedrop,ehartsuyker/securedrop,ehartsuyker/securedrop,heartsucker/securedrop,garrettr/securedrop,heartsucker/securedrop,ehartsuyker/securedrop,ehartsuyker/securedrop,conorsch/securedrop,heartsucker/securedrop,heartsucker/securedrop,conorsch/securedrop,ehartsuyker/securedrop