Allow listing of second factors

Dep: https://github.com/SURFnet/Stepup-Middleware-client/pull/9

- [ ] Revert 11993d9
it's a SecondFactor, not an identity :wink: time for a :tropical_drink: under a :palm_tree: ?