Basic 2FA (via external app)

2FA never happened. We got magic links instead :roll_eyes: