Bad logic on 2fa auth caused immediate failure