Why is two-factor authentication required?