Enforce a 6-digit security verification code sent to the user's registered email address upon every login. The code expires after 5 minutes.