Two-factor auth flow should ignore spaces in token #2405
Description
I enabled two-factor auth and then panicked because I couldn't log in any more. This turned out to be because the Google Authenticator app displays the code in two halves, like 123 456, but the authentication code is expecting the digits all together, like 123456. The auth flow should probably strip the spaces from this field before checking it, so that both ways work as expected.