make two-factor authentication optional
show alert information on home page when two factor authentication is not enabled