WebUI: move OTP to be the last field in the PW reset form
    
    Since TOTPs have a limited validity, let the user enter
    them as the last item in the form.
    This reduces the chance of the TOTP getting invalid while
    the user is still filling out other fields.
    
    Related: https://pagure.io/freeipa/issue/5628
    Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>