Fix 2FA setup accessibility

[cedric-anne]

1. The 1/2/3 elements should be ul/li elements.
2. The JS logic is buggy, resulting a an unexpected "tab" behaviour (focus goes to the second next field). Using a unique field would be probably simplier.