Allow listing of second factors

Dep: https://github.com/SURFnet/Stepup-Middleware-client/pull/9

- [ ] Revert 11993d9
same here