Add a second factor of authentication to your website for those of your users who have smart phones...
You http-redirect users to us for TOTP authentication and we redirect them back to you when done. Then you can mark their web sessions authenticated.
Also known as: totp.me