Previously, an invalid 2FA code would abort the process and the user
would have to restart authentication from scratch. This was fixed with
the recent modifications to authentication process, and now it's tested.
It also displays a helpful warning about the previous code being invalid.