We should add the following features for account security:
- Login Tracking Across Devices, with log out everywhere facility
- Passkey 2FA or Login
- MFA Authentication / 2FA Approval (Voluntary and Mandatory per usergroup)
- Password free login
- Alerts when unknown logins happen (this will need fleshing out, but essentially when a new device logs in)