add 2-step logic (openid&mutualfriends)