quick fix so that you can't auto log in to /edit until 2FA is completed