Make sure bad credentials doesn't mean user has 2FA.
Merge pull request #11 from rogerhutchings/get-token-2fa-fix

Make sure bad credentials doesn't mean user has 2FA.