Update changelog

CHANGELOG.rst

@@ -29,6 +29,7 @@ Added
 * GraphQL queries and mutations for core data management
 * [Dev] Introduce new mechanism to register classes over all apps.
 * Data template for `room` model used for haystack search indexing moved to core.
+* Support for two factor authentication via email codes and Webauthn.
 
 Changed
 ~~~~~~~
@@ -49,6 +50,8 @@ Changed
 * Get dashboard widgets and data checks from apps with new registration mechanism.
 * Use write-through cache for sessions to retain on clear_cache
 * Better error page with redirect option to login page when user has no permission to access a route.
+* Users now can setup as many 2FA devices as they want.
+* The 2FA profile overview was completely redesigned.
 
 Fixed
 ~~~~~