Documentation for enforcing 2FA is outdated

Someone pointed out on twitter that the doc on enforcing 2FA was outdated.

https://docs.gitlab.com/ce/security/two_factor_authentication.html

cc: @marcia