Also continued a bit on the MFA verification system. Moved some MFA routes to public space using updated login service to get the current user that is either logged in or last attempted login (With correct creds).
- Includes testing to cover flow. - Moved TOTP logic to its own controller. - Added some extra totp tests.
