Added requirement for user to enter their password when updating 2fa settings