David Walsh's review of Two-Factor Authentication with Node.js