Add support for session traps; make mfa challenge session trap; remove DMZ middleware

app/routing/routers/auth/mfa.routes.js

@@ -2,25 +2,21 @@ const mfa_routes = {
     prefix: '/auth/mfa',
 
     middleware: [
-
+        'auth:UserOnly',
     ],
 
     get: {
         '/setup': [
-            'middleware::auth:UserOnly',
             ['middleware::auth:RequireTrust', { scope: 'mfa.enable' }],
             'controller::auth:MFA.setup',
         ],
         '/challenge': [
-            'middleware::auth:DMZOnly',
             'controller::auth:MFA.challenge',
         ],
         '/disable': [
-            'middleware::auth:UserOnly',
             'controller::auth:MFA.get_disable',
         ],
         '/disable/process': [
-            'middleware::auth:UserOnly',
             ['middleware::auth:RequireTrust', { scope: 'mfa.disable' }],
             'controller::auth:MFA.do_disable',
         ],