Updated for v4.0.0-rc2

CHANGELOG.md

@@ -4,7 +4,7 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [4.0.0-rc2] - 18 August 2023
+## [4.0.0-rc2] - 21 August 2023
 
 ### Added
 
@@ -13,13 +13,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   * `SESSION_COOKIE_AGE` sets the number of seconds a session cookie will last before expiring
   * `SESSION_EXPIRE_AT_BROWSER_CLOSE` sets whether the session cookie will expire when the browser is closed
   * `SESSION_SAVE_EVERY_REQUEST` sets whether the session cookie will be saved on every request
+* Added support for two-factor authentication using TOTP
 
 ### Changed
 
 * Separated the project form into two forms: one for the project details and assignments and one for project components (e.g., white cards, objectives)
   * This allows accounts with the `user` role to edit project components without permission to edit the project or its assignments
 * Moved project assignments to the new "People" tab on the project dashboard
 * Hid menus and buttons for features that are not available to the current user
+* Access to the admin console is now routed through the main login form to require 2FA (if enabled for the user)
 
 ### Fixed
 
@@ -30,7 +32,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 * Removed the unused `restricted` account role
   * This is clean-up for the release candidate; the `restricted` role was experimental and never implemented in the access controls
 * Removed the `user` role's privileges to create, edit, and delete project assignments and client contacts to better adhere with the role's intended permissions
-* Removed permissions for updating report templates via teh GraphQL API
+* Removed permissions for updating report templates via the GraphQL API
   * This option will return in a future release when it will be possible to upload a template file via the API
 
 ## [4.0.0-rc1] - 30 June 2023