Reminder again: Using third-party tools to simulate cookie login, or just opening a web page without verifying 2fa will not be counted as a valid login.