code: func (s *AuthServer) CheckPassword(user string, password []byte, otpToken string) error {
  	err := s.CheckPasswordWOToken(user, password)
  	if err != nil {
  		return trace.Wrap(err)
  	}
  
  	err = s.CheckOTP(user, otpToken)
  	return trace.Wrap(err)
  }
docs: // CheckPassword checks the password and OTP token. Called by tsh or lib/web/*.