Hacker News Reader

Also two-factor auth via email/SMS codes

Two factor is actually pretty easily solved too though?

If authentication isn't your core business there's little reason to handle all these things yourself.