support github two-factor authentication, closes #9