Duo two-factor authentication for Java web applications