Email-based 2FA

[martiangirlie]

• Add an email field on to the User schema.
• On register, get email and store encrypted version.

[martiangirlie]

• Email can be used for a "Forgot your Password", or when going to a new device.