session: ********************
New-Api-User: ********************
Authorization: ********************
curl --location --request POST '/api/user/2fa/backup_codes' \ --header 'New-Api-User: <api-key>'