added remaining step for 2-step authentication flow