Minor updates to the providers class names/args.
Flesh out the prompt for the dummy option a bit.
Add a boolean method to check if a user is 2fa'd
Stash a nonce for the attempt in usermeta.

This will let the authentication from the first step be stored securely
and temporarily so long as the second step is completed within the
allotted time (1h currently)
Whitespace!
Add the form for the second step.
And now add the catcher for the form.