session: ********************
New-Api-User: ********************
Authorization: ********************
curl --location --request POST '/api/user/2fa/setup' \ --header 'New-Api-User: <api-key>'