typo in docblock for `twofactor_auth()`