When user wants to login to the sytem, to protect the login action I want SMS as the 2nd authentication factor on user's account. Email would be the secondary alternative if SMS is not available ...