add support for 2fa

- Stores a unique-token instead of the password
- When authentication fails with 2fa, only the auth-code is asked again