loadAuthData() didn't include totp_enabled or require_2fa in the AuthData response. The frontend always saw undefined → false. Now includes both fields from the database. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>