Oden authored Jul 29, 2018 and Deimos committed Aug 15, 2018

Adds optional two-factor authentication support using TOTP, and
including backup codes in case of a lost 2FA device.