2FA security improvements