Use the beta version of django-two-factor-auth

This is the latest version, but pip won't pick it up (probably because
it's marked as a beta). It has a number of fixes, including a fix for
the double login bug.