Logged out, logged back in took me to 2-step verification

I did not expect to need to verifiy with the 2-step each time I log in - I tried this multiple times, it always made me do the 2-step

Start by reproducing the logout and login flow described in the issue, then trace where the authentication session and 2-step verification requirement are handled. Confirm whether the behavior is intentional and identify the relevant authentication entry points. Done means repeated logins after logout no longer trigger 2-step verification unexpectedly, with regression coverage for the observed flow.

Written by the indexing model from the issue text.