Implements 2nd step of authentication