#14595 Moved tfa_login flag and autologout time to database from session, now they are properties on user model.
Moved some js and css tags to corresponding views (content_for header_tags) from hook.
Removed sensitive information from init.rb default settings.
Numerous minor fixes.