Device login with full SSO session
Currently device login only allows authenticating with an OAuth2 service. It cannot be used to get a full SSO session that allows changing e.g. the password or logging into multiple services.
Since 2FA is sometimes difficult to use on mobile device, having the option to get a full session would be nice.
Split off #135 (closed)