fix: two factor activated with unconfirmed email shows multiple conflicting flash messages

[kjellberg]

If a user has activated two factor authentication and the email address (for whatever reason) is not confirmed anymore. It shouldn't show the "successfully signed in" flash message. This surely won't happen anyways, since an email must be confirmed before the user can activate two factor. But it feels good to have it right.