Very minor refactor of 2FA functions in journalist.py
Very minor refactor of 2FA functions in journalist.py

I found it pretty purposeless to introduce a second object reference to the user
object, so I got rid of that. I also think it's generally best to avoid this
sort of aliasing, which I believe makes it easier to make mistakes.

ageis/securedrop,garrettr/securedrop,garrettr/securedrop,conorsch/securedrop,ehartsuyker/securedrop,conorsch/securedrop,ehartsuyker/securedrop,ehartsuyker/securedrop,heartsucker/securedrop,heartsucker/securedrop,micahflee/securedrop,ehartsuyker/securedrop,garrettr/securedrop,micahflee/securedrop,ageis/securedrop,micahflee/securedrop,garrettr/securedrop,ehartsuyker/securedrop,heartsucker/securedrop,micahflee/securedrop,conorsch/securedrop,heartsucker/securedrop,ehartsuyker/securedrop,ageis/securedrop,heartsucker/securedrop,conorsch/securedrop,ageis/securedrop,conorsch/securedrop