Two-factor auth with public-key cryptography