Management command for disabling two-factor

This PR adds a management command for disabling two-factor authentication for a user. This can be used if the admin lost access to the additional factor, and the admin should refrain from accessing the database. A test case should also be written, so it's not yet ready for merge.