Bug fix: auth_mfa_setup is now called properly everywhere