Rename mfa_token to mfa_code?

[aaronpk]

The current mfa_token is more like an authorization code, in that it is relatively short lived, does not provide access to any resources directly, and is only used in order to obtain an access token. So maybe this should be called mfa_code instead?