A two-factor provider for Webauthn devices