Changed the account controller to allow for login with a second factor