Every admin account must complete TOTP setup before any admin route is accessible.
Enter an admin email to generate the TOTP secret and QR code for Google Authenticator.