Barebones two-factor authentication with Devise