2-factor authentication without a smartphone