Security feature on setting OTP - option to verify 2fa setup

[akurzawa]

Hi

for sake of completness - and not to lock out own xoa account after turing on OTP authentication, xoa should ask for the 2fa code from the generator before saving changes. I've seen it numerous of time where 2fa was setup and after saving setup user could not log in becouse of wrong 2fa code from the genrator.

[julien-f]

Thanks for this very well specified issue, we'll do it in XO6 🙂