Common access card (two-factor) authentication