Function handle_mfa_verify 

pub async fn handle_mfa_verify(
    ctx: &ReqCtx,
    code: &str,
    csrf: Option<&str>,
) -> ApiResponse

Verify a TOTP or one-time backup code and, on success, upgrade the session.