Have a 'security questions' factor

[brendanheywood]

Has a soft dynamic dependency on the https://github.com/catalyst/moodle-tool_securityquestions

Not sure how to handle the login flow form. Perhaps have a second method which declares a url to go to instead of an auto loaded form. Actually make it a method with a base class which does the auto loading an then you can override it to make it go somewhere else.