Verify credentials before TFA, and show TFA screen