By the way, if I understand correctly, one request is enough to disable.
steam.on('webSession', (sessionID, cookies) => {
let cookiejar = request.jar();
for (let arr of cookies) {
cookiejar.setCookie(arr, 'https://store.steampowered.com');
}
request({
method: 'POST',
uri: 'https://store.steampowered.com/twofactor/manage_action'
jar: cookiejar,
simple: false,
form: {
action: 'actuallynone',
sessionid: sessionID
}
});
});