add mfa functionality
5 minute session instead of an hour
default to 15 minute session - the minimum
change error handling
better error handling
Merge pull request #1 from sportngin/mfa

Add mfa functionality