pffft! I've spent about two whole days to figure out why the 2-factor authentication (#) # for # (I tried 2) do not work in combination with the sidebar-login plugin (login form widget on front end, which works splendidly on its own): the latter uses Ajax and provides the handler with only those fields it knows, which of course doesn't include the *extra* field for the one-time password (#). No hooks that I can use to solve this - so now I need to figure out a nice way to solve this... will need changes in both plugins! # - time for a break with a !beer!