Explicitly ignore errors from writes to responses

auth-new/totp.go

@@ -88,7 +88,13 @@ func (a *Authenticator) PerformTotpLogin(
 	}
 	// If not verified yet, mark as verified
 	if strings.HasSuffix(dbSecrets[foundIndex].Name, totpUnverifiedSuffix) {
-		dbgen.UserAuthMethod.
+		// TODO: Not nice, think about this more
+		// Problem: What does it mean for a credential to not be verified?
+		// Does it just mean not used yet?
+		// Or should it also mean that it's unusable until confirmation during setup?
+		// I prefer the 2nd one to avoid lockout problems
+		// In which case, this needs to be modified
+		_, _ = dbgen.UserAuthMethod.
 			Where(dbgen.UserAuthMethod.ID.
 				Eq(dbSecrets[foundIndex].ID)).
 			Update(dbgen.UserAuthMethod.Name, strings.TrimSuffix(dbSecrets[foundIndex].Name, totpUnverifiedSuffix))