Two-Factor Authentication

Since we're dealing with sensitive student information and not everybody is securing their computer from unauthorized access, two-factor authentication should be mandatory in production.

This should be considered but cannot completely solve the issue:

• Carelessness on the side of tutors and reviewers cannot be prevented only limited.
• Tutors neither have access to student data nor a way of linking any code to a student.

added Doing label

removed Doing label

added security label

added Enhancement label

Using JWT as authentication will prevent some risk of unauthorized access due carelessness of tutors. See #41 (closed)

closed