Add a button "Visit Security Settings" that opens a browser with
https://wordpress.com/settings/security/?ssl=forced when a two-step
enabled WP.com user failed to login - #114