enforce user 2FA

[dxlr8r]

I would like an option to enforce 2FA, for example, the user only has access to it's own profile, until it has completed setup of 2FA.

[techknowlogick]

closing as dupe of #880