added recommendation in documentation to using 2-step verification