Requiring 2FA for staff

[jomaxro (Joshua Rosenfeld)]

This was added in March 2019.
https://review.discourse.org/t/feature-enforce-two-factor-authentication-6348/2198