MultiFactor Auth support: answer out of band challenge.

post https://example.com/Security/AnswerOOBChallenge

Invoked by 3rd party services for answering out of band challenges.
(text messages or email, not PhoneFactor)
Supports the click on link scenario.