can we please just get rid of mandatory two-factor authentication already?