Save challenge type in JWT body
Added top level API for getting TFA method