document two factor authentication

Merged Bengfort requested to merge mfa into master

Based on the explanation by @krause

Merge request reports