Change re-authentication to only require a second factor rather than password and second factor and require authentication for more account management actions#8037