How does Salesforce support built-in authenticators (biometrics, platform authenticators via WebAuthn), and what configuration is required to allow users to register this MFA factor?