T1652 - Add 2FA

[clementcharmillot]

Main Changes

• Fix error handling and correctly redirect to the login screen on account error.
• Use an auth token after authentication kept in local storage in place of the password. Affects both 2FA and non-2FA accounts.
  After authentication, the local storage contains the following:

{
  "username":"admin",
  "userId":1973,
  "accessToken":"...",
  "refreshToken":"...",
  "accessTokenExpiresAt":"2024-07-31T16:09:59Z"
}

• Add a 2FA field, hidden by default as 2FA is only for internal users, to reduce friction with the current flow
  
  

• When the user tries to login without 2FA on an account with 2FA enabled, the field appears and a corresponding error message is shown:
  

TODO before merging

• Store access + refresh token in Secure, HttpOnly, SameSite strict cookie (if possible, prevents token extraction through XSS)

Minor Changes

• Make the login form responsive
  

Related PR

CompassionCH/compassion-switzerland#1638

[NoeBerdoz]

The method is missing a return statement, in case of error

Suggested change

	}
	}
	return;