https://www.angioni.nl/2017/01/18/new-eu-regulation-from-june-1st-2018-all-webbased-systems-that-contain-sensitive-data-must-have-2-factor-authentication/