Do I have to use two-step authentication every time?