Logging in: 2-factor authentication and strict password requirements