* reduce default RecentAuthenticationRequiredMixin timeout to 15 min * never cache pages with RecentAuthenticationRequiredMixin * show emergency codes only once after generating