Two factor auth consistently returns invalid authentication code

Sure thing - I’ve added a 30 second grace window that should alleviate this.
https://github.com/discourse/discourse/commit/74aecdfd9d93b8e2df4719c4140209dd38bb4ae0