Co-authored-by: Lorenzo Milesi <lorenzo.milesi@yetopen.com>
Two factor seed page was not properly checking for user session, allowing an authenticated user to see everyone's 2fa seed