Force 2-factor authentication (2FA) for all users to comply with GDPR

Ditto, really important in todays world

Please update when confirmed or in scheduled release