Add two-factor auth question

@fjakobs @basdewachter