Cleanup twofactor docs and code.

Remove spurious newlines, reflow some text to fit in <80 characters, add TOTP to the changelog.