app.route("/two_factor", methods=["GET", "POST"])
nothing calls this directly
no outgoing calls
no test coverage detected