Implement 2-factor authentication for local user accounts

Right now, we don't have any way to allow users to set up 2FA. We should add support for this, probably via TOTP so that users can use Authenticator apps (Authy, 1Password, Google Authenticator, Microsoft Authenticator, etc) easily.

Would be really cool to add U2F support as well. I have some Yubikeys...