Before this change, we display a callout for users that have enabled the
two-factor authentication but have not yet download the recovery codes.
This callout was displayed in all pages.

After this change, the callout is only displayed in the `To-Do List`
page.

Changelog: changed