Started work on more secure twofactor

Long story short, it doesn’t work yet.