https://www.hanniganblog.com/blog/2013/12/11/secure-passwords-two-factor-authentication/