blog - two-factor authentication and cloning with https