Require two-factor authentication for staff

Feature Request