How do I bind a security authenticator (2FA) via the Client Portal?