allow_2fa is documented to make 2FA required - but its just allowed

[consideRatio]

The allow_2fa config is documented to make it required, but it is as it indicates by its name something you can opt in to rather than something that is required.

See https://native-authenticator.readthedocs.io/en/latest/options.html#add-two-factor-authentication-obligatory-for-users