curl --request POST \
  --url https://api.wacht.dev/me/backup-codes \
  --cookie session_id=

{
  "codes": [
    "12345678",
    "87654321"
  ]
}