Cleaned up other sections, wrote up User Interface & Threat Mitigation sections -- only todo is conclusion.

P.S. Peter, I'm going to beat you on the head if you call this two-factor authentication one more time.
Finished conclusion.