https://medium.com/@iSecMax/two-factor-authentication-security-testing-and-possible-bypasses-f65650412b35