Is a 2-step verification code required for every login?