XF 2.2 two-step verification is being forced

I don't know what I did yesterday - but I broke two-step verification, and now it's being forced on my users. I now have it set to No for everyone of my User Groups, but my users are still forced to confirm via email. When I analyze permissions for one of the users who gets challenged, Require Two Step Verification says No, and under the details all of the groups the user belongs to also say no. But when he logs in, he has to get the code from the email. What could I be missing? Anyone else ever have this problem?

Yesterday I created a new 'verified user' group, and then added it as a secondary group to all of the 'registered users' - but for now the security in the two is the same. I don't think I changed anything else.
 
Top Bottom