feat: Two Factor API

[SebastianKrupinski]

Ability to check/enable/disable configured 2FA with API endpoint

Request State

POST /twofactor/state

{
	"users": ["admin", "user1", "user2"]
}

Request Disable

POST /twofactor/disable

{
  "user": "user1",
  "providers": [
    "backup_codes",
    "totp"
  ]
}

Request Enable

POST /twofactor/enable

{
  "user": "user2",
  "providers": [
    "backup_codes",
    "totp"
  ]
}