make two-factor authentication optional
make two-authentication optional