Correct behavior when entering wrong MFA code