Add scaffold of 2-factor auth