Add two-factor authentication

Accounts should have the ability to add two-factor authentication (for example, with an authenticator app or hardware key) to do actions like withdraw or tip. There is currently no confirmation step when you withdraw any amount!