Support TOTP 2fa, allow for changing password, add session management and account removal.
The note is not visible to the blocked user.