* Exceptions thrown by TwoFactorAuth are now of type TwoFactorAuthException
* createSecret now has extra argument $requirecryptosecure which is used to force cryptographically secure secrets
* HashRNGProvider now returns string instead of "byte array"
* HashRNGProvider is now initialized with two random values (for the heck of it...)