schema migration and account fixes

very close to rolling this out! just need to address some security concerns first

admin/views/login.html

@@ -43,6 +43,10 @@ input {
     font-family: inherit;
     color: inherit;
 }
+input[disabled] {
+    opacity: .5;
+    cursor: not-allowed;
+}
 
 button {
     padding: .5em .8em;
@@ -89,7 +93,7 @@ button:active {
             <input type="password" name="password" value="">
 
             <label for="totp">TOTP</label>
-            <input type="text" name="totp" value="">
+            <input type="text" name="totp" value="" disabled>
         </div>
 
         <button type="submit" class="save">Login</button>