show warning when using heroku-accounts
Merge pull request #1324 from heroku/heroku-accounts-warning

show warning when using heroku-accounts
use 2fa directly instead of auto-preauth strategy