Add two-step login with six-digit code sent via phone or email.

Passwords are too easily obtained by hackers who are intent on getting info. Need a more secure way of verifying identity.