Enforce Two-Factor Authentication