Two-factor authentication that doesn't require service-side adoption. HackUpstate 2013