* Add bolean field to Auth class
* Append migration
* check TOTP enabled in login mechanism
* enable password auth in signup mechanism

Auth has now a realm attribute, callable as a key in the User auths dictonary relationship

Instead of profile regex, we switch to more semantic
profile format. There is no valid mapping between those,
so a default of lowercase is set for all existing services.