added second factor capability
Merge pull request #89 from heroku/second-factor

added second factor capability