Rename route /recover #3
Description
"This name I find misleading (without having had a fresh look at other MFA implementation). Yes we're using a recovery code but what we're doing is really deactivating MFA (i.e. it's a variant of mfa.deactivate). I'd suggest renaming to something like deactivateWithRecovery/recoverAndDeactivate/…"