Enable TFA directly if user already has a default pairing