NEW: TOTP authentication provider. Logging in using TOTP propagates to impersonated sessions as well as introduces a new permission bit, PRIVILEGE_EXTAUTH to restrict API usage. (Login)
NEW: set_extended_auth_flag- bestow PRIVILEGE_EXTAUTH to an active session if elevated (auth)
CHG: bump (migrations)