what does two factor authentication typically required