Also create seperate account security options page

This commit requires a new database table

These features only have any value if users actually use them, and
experience has shown that nowhere near enough users use them to make
them worthwhile.

- Removed unused JS functions
- Inlined functions not often used
- Minimized some overly verbose functions

Also file permission cleanup

2FA class stolen from RobThree and stripped down.
Works best with qrencode utility installed, but will fall back to using
google charts if qrencode is missing.

End goal is to remove all inline JS, starting with onclick

displaying a tooltip caused horizontal scrollbars to disappear even when
the window was small and should have kept one

Recreate it on demand

Partially addresses #6