another day of seething at whatever heroku security engineer decided 2fa + daily logouts was a good combination