Fix Snyk security findings: XSS, open redirect, hardcoded secrets, cookie security, MD5 replacement

src/lib/auth/totp.test.ts

@@ -1,9 +1,8 @@
 import { describe, expect, it } from "vitest";
 import { generateTotp, generateTotpSecret, totpKeyUri, verifyTotp } from "./totp";
 
-const SECRET = generateTotpSecret();
-
 describe("totp", () => {
+  const SECRET = generateTotpSecret();
   it("verifies the current generated code", () => {
     const code = generateTotp(SECRET);
     expect(code).toMatch(/^\d{6}$/);