REST API – 2FA