- npm updates

- Admins can no longer delete any users or roles
- Additionally, the name of a role in edit mode is now read-only
- extra new SetupConfirmation.vue compoenent for verifying qrcode 2FA
- adapted ci.yaml

app/Controllers/Http/Auth/AuthController.ts

@@ -18,8 +18,18 @@ export default class AuthController {
         // const { email, password } = request.only(['email', 'password'])
 
         try {
-            // attempt to login
+            // attempt to verify credential and login user
             await auth.use('web').attempt(email, plainPassword);
+
+            // const user = await auth.use('web').verifyCredentials(email, plainPassword);
+            // if (user.isTwoFactorEnabled) {
+            //     // session.put("login.id", user.id);
+            //     // return view.render("pages/two-factor-challenge");
+            // }
+
+            // session.forget('login.id');
+            // session.regenerate();
+            // await auth.login(user);
         } catch (error) {
             // if login fails, return vague form message and redirect back
             session.flash('message', 'Your username, email, or password is incorrect');