Admin require two-factor

Would be nice to allow application admins to require two factor sign-ins.