2fa: protect all user routes

Author: dpslwk

routes/web.php

@@ -54,7 +54,7 @@
 });
 
 // Routes in the following group can only be access once logged-in
-Route::middleware(['auth'])->group(function () {
+Route::middleware(['auth', '2fa'])->group(function () {
     Route::view('registration-complete', 'pages.registrationComplete')->name('registrationComplete');
 
     // Users (show, edit, update) to allow users to update there email if they can't verify it