Two-factor authentication for RoR apps