By mistake, we used TokenLoginForm instead of EnrollTokenForm(),
which worked until we renamed login tokens to access codes :)