happy path feature specs for two factor auth