Staff sign-in requires a second factor.