pub const MFA_OK: &str = "ok";
Session is fully authenticated (second factor satisfied, or none required).