Redmine

When deleting the used twofa backup code there is this line:

Token.where(user_id: @user.id).find_token('twofa_backup_code', code).try(:delete)

Token.find_token however doesn't honor the prepended relation, and also we do check the user
in the next line so the patch simply removes the where(...) part.