Tweak to 2fa controller