Two-factor authentication (2FA) and multi-factor authentication (MFA) service for web and mobile apps