Update the 2fa section to only support val-session

The 2fa command will live on for a bit longer, but it will only support
val-session.

Signed-off-by: Konstantin Ryabitsev <konstantin@linuxfoundation.org>