read and verify MFA options