Move the hardcoded ending urls, to a new tool which will save it in the registry. Also provide a new controlpanel which will allow to configure different aspects of the twofactor functionality
Include an upgrade step to fix users that choose sms method but did not provide a cell phone
flake8