ToolUser user = page.getUser();
boolean verifyError = false;
if (page.isFormPost() &&
page.param(String.class, "action-verify") != null) {
if (!user.verifyTotp(page.param(int.class, "totpCode"))) {
verifyError = true;
} else {
user.setTfaEnabled(!user.isTfaEnabled());
user.save();