make difference between otp which occur just for the first time and otp enabled by user, which is always present