[TASK] security: disable 2FA, add note for password protection