Two-factor auth flow should ignore spaces in token

[wolfgang42]

I enabled two-factor auth and then panicked because I couldn't log in any more. This turned out to be because the Google Authenticator app displays the code in two halves, like 123 456, but the authentication code is expecting the digits all together, like 123456. The auth flow should probably strip the spaces from this field before checking it, so that both ways work as expected.

[jbrooksuk]

Nice observation!

[jbrooksuk]

Fixed in 2742797