Providing multiple forms of two-factor authentication to validate user identity