🇺🇸United States @delzhand

I forgot an important aspect of this - what this MR allows is for users who DON'T have TFA enabled to log in via REST. My particular use case is that TFA is only required for certain privileged roles, while the vast majority of users do not have TFA enabled. The one place I'm using REST is exclusively for those less privileged users.

delzhand → created an issue.