Update TFA tests to ensure email/phone are confirmed