42.57.12
Fixes
Require a recent identity check to turn off two-factor authentication4113
Turning off two-factor authentication and making new recovery codes now need a recent identity check and your password. The account security page opens the identity check when your session is stale. The HTTP endpoints for these actions are removed.