Noted where argument extractor configured.
strong_two_factor state id now uses underscores rather than dashes
Document `sample_two_factor` authentication method example.