Feature: Configurable timeout for Email MFA.
Description: We should have a configurable setting for email MFA timeout.
Use-case: Users may have their email quarantined for 10 minutes before being allow through to their inbox. The 5 minute timeout seems extremely short for Enterprise environments. In this case if Email MFA is mandated, users will be unable to access their application.