peopleinside I am personally against email codes as they go to the same place as your password reset emails, which defeats the purpose of twofactor.
Funny you should bring this up now because I'm working on authy one touch would should hopefully help with the problem of losing access to Google authenticator.
In terms of getting back into admin, disable the extension from the settings table in mysql, and make sure to unblock the route in nginx.
Ninja edit: you should only disable it if you, or someone you can 100% verify it is themselves, a hacker may try to get you to disable it so they can get into an account.
