updating LoginServlet : adding a second control : checks a 2nd parameter called "token" and compares it with a RFC 6238 compliant code generator (the user has to use google autenticator to generate the correct token)