Sign in with email. Users with 2FA enabled must verify an email OTP after password.

If no users exist, set admin.bootstrap.email and admin.bootstrap.password.