Are you inputting both the password and the code generated by the token? Two different fields.