SMS / Google Authenticator Verification upon Login
Everytime a user logs in they should have to verify using either SMS text code or Google Authenticator. They should have the option to enable / disable this feature and choose between SMS and Authenticator.