Two-factor authentication: working draft