Activating two-factor authentication