I would like to know if two-step verification protects the token help me