42.57.12

Fixes

Require a recent identity check to turn off two-factor authentication4113

Turning off two-factor authentication and making new recovery codes now need a recent identity check and your password. The account security page opens the identity check when your session is stale. The HTTP endpoints for these actions are removed.