if 2fa not enabled, just continue