Should re-auth main password before enabling approve login request option

Otherwise, somebody can easily log in without main password if they got an unlocked window.