Painless Migration from Passwords to Two Factor