Security - additional security with two factor authentication

[dahal]

This feature adds additional security

Here are some summary

• If it's a bot, redirect to forbidden page
• If token, user or sessionId is not present, redirect to login page
• If sessionStore is not present, add it to Redis with geo data
• If user is logged in but does not have 2fa enabled, redirect to verify auth
• If current page is auth, 2fa or verify auth page, skip
• If two factor is enabled but not verified, redirect to 2fa page
• If two factor is not enabled and verified, skip
• If two factor is not enabled, skip