fix(config): disable 2FA for non-production installs

Shouldn't be used, since it just causes failures for logins, as mail
isn't a hard requirement for non-production installs

Author: sam-lord

lib/tasks/configure/options.js

@@ -182,5 +182,16 @@ module.exports = {
         },
         type: 'string',
         group: 'Service Options:'
+    },
+
+    // Security options
+    staffDeviceVerification: {
+        description: 'Enable/disable staff device verification (2FA)',
+        configPath: 'security.staffDeviceVerification',
+        defaultValue: (c, env) => {
+            return env === 'production' ? true : false;
+        },
+        type: 'boolean',
+        group: 'Security Options:'
     }
 };