fully functional remembered token 2fa