Enabling two-factor authentication within user accounts