2FA publishing still doesn't work for me. just use legacy tokens at this point, gave up trying to figure out what's wrong