'Ensure that logging in twice with the same TOTP token
fails.'

def test_totp_reuse_protections(self):

    token = self.user.totp.now()
    resp = self._login_user(token)
    self.assertRedirects(resp, url_for('index'))
    resp = self._login_user(token)
    self.assert200(resp)
    self.assertIn('Login    failed', resp.data)
