def METHOD_NAME(self, request, user):
    '''
    Is the auth okay for this request/user?
    Hook here to allow apps to customize behaviour. Returns a boolean pair:
        Is standard Django auth okay?
        Is 2FA okay?
    May assume that Django auth *and* OTP auth have said yes. Only need to restrict further.
    '''
    return check_auth(self, request, user)