Twitter's new two-factor authentication sounds cool, but we can't get it to work