async function verifyAuthCodeForUser(req, res) {
        const session = await getSession(req, res);
        const secret = getSettingsCache('admin_session_secret') + session.user_id;
        const isValid = totp.check(req.body.token, secret);
        return isValid;
    }
verifyAuthCodeForUser

@param {Req} req
@param {Res} res
@returns {Promise<boolean>}