Key considerations when selecting a two-factor authentication solution for EPCS