Remove the 'secret' parameter from the 'is_totp_valid' function

Since the variable is global anyway, we don't need to pass it as
parameter.