MDL-60827 oauth2: Consider requireconfirmation setting on login