user form: add totp status res.users