Http Code Google Authenticator Incorrect Reasoning