TwoFactor 4.0.0 modernizes two-factor authentication for CMS Made Simple 2.2.23+ and PHP 8.1+.

This release rebuilds the login flow around the modern Core::LoginVerified lifecycle, so 2FA integrates cleanly with the admin login without the old logout-and-back-in workaround. Verification pages now work correctly under every URL setup (pretty URLs on or off), forms and links submit reliably, and choosing an alternative method is presented as a clear, icon-based list.

Highlights:
  - Reliable verification on all url_rewriting modes (mod_rewrite, internal, none)
  - Redesigned "use a different method" picker with per-method icons
  - Graceful handling when an email or SMS code cannot be sent
  - Fixed backup-codes verification screen
  - Automatic cleanup of legacy login settings on upgrade and uninstall

Requirements: CMS Made Simple 2.2.23+, PHP 8.1+, CMSMSExt 1.5.2+. HTTPS required for Passkey/WebAuthn.