Migrating 2FA to a new device