Reset a user’s two-factor authentication