Implement 2FA login flow