refactor mfa options