Columns for MFA status, secret key, and JSON-encoded array of recovery codes are added to the users table. Change-Id: Ifed7e50ec9767c1670d9682df1575678984daa60