Implement 2FA check on /send routes