- Normalized login responses for accounts with MFA enabled to follow authentication best practices.
- Added a `user_mfa_requested` activity, recorded when valid credentials are submitted for an MFA-enabled account and a verification email is sent.
