Readme: add section about 2-factor authentication