When 2fa is required you can't change your authenticator app without setting up something else first

## Summary

If your organization requires 2FA and you only have a single authenticator app configured, and you need to switch authenticator apps, you can't update the existing one to be the new one. Instead you have to add some other 2fa first, then delete the authenticator app, then add a new authenticator app, then delete the other 2fa you've configured (if you don't want it).

## Motivation

People who use google authenticator and switch to a new iphone have to reregister their authenticator apps with everything. This would make that easier.