// before registering, do human verification. assign device id
// on register, associate device id with registered account.
// have array of device ids on a user object. when logging in, if device id not found in associatedDeviceIds, verify new device id with an email confirmation.
// (already have email stored from 2fa)
Notes from spike #69:
// before registering, do human verification. assign device id // on register, associate device id with registered account.
// have array of device ids on a user object. when logging in, if device id not found in associatedDeviceIds, verify new device id with an email confirmation. // (already have email stored from 2fa)