drop double otp call
add 2fa ui