add command bus to MR config class; rework SystemWeb 2fa cookies to use config commadn bus