I wonder how you bone up 2fa like this. this website lets you log in and reach the administrative interface with just name+password. but if you go to the "public view" and return to "admin view", then it prompts you to do 2fa.