Duo two-factor authentication for Go web applications