Registration, MFA setup and login are handled by Cognito’s Hosted UI. After sign-in, your
id_token is stored and sent as a Bearer token to the API.
Add more checkboxes if you like. When none are checked, the defaults (800.jpeg, 400.webp) are used.