Implement optional 2-step account access verification