allow to store temporary sessions within the data provider

so we can persist password reset codes, OIDC auth sessions and tokens.
These features will also work in multi-node setups without sicky
sessions now

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>

httpd/api_mfa.go

@@ -221,7 +221,7 @@ func saveUserTOTPConfig(username string, r *http.Request, recoveryCodes []datapr
 		return util.NewValidationError("two-factor authentication must be enabled")
 	}
 	for _, p := range user.Filters.TwoFactorAuthProtocols {
-		if !util.IsStringInSlice(p, user.Filters.TOTPConfig.Protocols) {
+		if !util.Contains(user.Filters.TOTPConfig.Protocols, p) {
 			return util.NewValidationError(fmt.Sprintf("totp: the following protocols are required: %#v",
 				strings.Join(user.Filters.TwoFactorAuthProtocols, ", ")))
 		}