Account recovery

Set up a new authenticator

Use one saved recovery code, then scan a new authenticator QR code.

Recovery code

This is private and only used to sign in.