diff --git a/.storage/auth b/.storage/auth
index 4c253c6..63e2fd0 100644
--- a/.storage/auth
+++ b/.storage/auth
@@ -35,20 +35,6 @@
             }
         ],
         "refresh_tokens": [
-            {
-                "access_token_expiration": 1800.0,
-                "client_icon": null,
-                "client_id": "http://127.0.0.1:8123/",
-                "client_name": null,
-                "created_at": "2019-05-27T19:02:46.741963+00:00",
-                "id": "418cd23f4af34b64b97a3a29f77173d3",
-                "jwt_key": "f2895be51bd7039326b73f70ae40b9a2f72fa4b4c4869bdab7ec5d2ad0fbde7ede4de98606c63480b9f7d69a244039ff6c23a271b5bd093207e0ce0528c2ce0c",
-                "last_used_at": "2019-06-30T17:38:55.829578+00:00",
-                "last_used_ip": "127.0.0.1",
-                "token": "f30618fff4b38cc6097580e074537fd8208cccf9e3437ccb04a93f22ec568b73e29cca037090bb8d52c8a2f65c2ab6e65a38c0638442daa34a7b09b9317db205",
-                "token_type": "normal",
-                "user_id": "2ffcb10d3db745b396789364fdef72ec"
-            },
             {
                 "access_token_expiration": 1800.0,
                 "client_icon": null,
@@ -71,7 +57,7 @@
                 "created_at": "2019-05-28T15:36:44.634951+00:00",
                 "id": "952866338b694f5b806eb4cdb8fd19f4",
                 "jwt_key": "fb1989218b2d6690fc17636866615d04f53352c179ded55cfc4d7d509c1c8354b17088f51a016b14e9b851a6faae274bf0f83fb7049bd0707c435f23113f3316",
-                "last_used_at": "2019-06-25T19:58:03.380113+00:00",
+                "last_used_at": "2019-06-30T18:30:19.144896+00:00",
                 "last_used_ip": "192.168.178.71",
                 "token": "5f7f4f3e8063e4e74570095749ec752bc1b74b26f6e4c20d0fe219753339e9d5ac44e2582d02257a9e2dc9116a79f668350bbad81dabd21ff52b08a109a2f5d8",
                 "token_type": "normal",
@@ -315,6 +301,20 @@
                 "token_type": "normal",
                 "user_id": "2ffcb10d3db745b396789364fdef72ec"
             },
+            {
+                "access_token_expiration": 1800.0,
+                "client_icon": null,
+                "client_id": "http://127.0.0.1:8123/",
+                "client_name": null,
+                "created_at": "2019-06-30T18:30:18.773163+00:00",
+                "id": "89fc73add91c4621a4e503edb8d18842",
+                "jwt_key": "d937a487109eb08b02d8dfc5083b1438eaed0778a1c77db1be1f7fb3787cb5a47d8173491f4c5756b3c24d9c9156971358bc3ffe77e782c66f26e08139671bb7",
+                "last_used_at": "2019-06-30T18:30:18.773202+00:00",
+                "last_used_ip": "127.0.0.1",
+                "token": "3a7bb2ff262e4d8798420a4db7cc0eb92ea801b54e52969a8d2b21854bab19ec101929ccbeb5870c512c4181a2ac41812d7d49421abc21d3c952d468f3f942b2",
+                "token_type": "normal",
+                "user_id": "2ffcb10d3db745b396789364fdef72ec"
+            },
             {
                 "access_token_expiration": 1800.0,
                 "client_icon": null,
diff --git a/.storage/core.restore_state b/.storage/core.restore_state
index 1e723f7..e61ba20 100644
--- a/.storage/core.restore_state
+++ b/.storage/core.restore_state
@@ -1,7 +1,7 @@
 {
     "data": [
         {
-            "last_seen": "2019-06-30T17:42:58.136518+00:00",
+            "last_seen": "2019-06-30T19:14:10.003604+00:00",
             "state": {
                 "attributes": {
                     "editable": true,
@@ -10,13 +10,13 @@
                     "user_id": "2ffcb10d3db745b396789364fdef72ec"
                 },
                 "context": {
-                    "id": "b221ff9c2ae34537981033f204f26154",
+                    "id": "884b8311871a4d9ca5feb6aef40fdd69",
                     "parent_id": null,
                     "user_id": null
                 },
                 "entity_id": "person.martin_bauer",
-                "last_changed": "2019-06-30T17:42:05.211271+00:00",
-                "last_updated": "2019-06-30T17:42:10.914816+00:00",
+                "last_changed": "2019-06-30T18:28:59.064041+00:00",
+                "last_updated": "2019-06-30T18:29:09.301522+00:00",
                 "state": "unknown"
             }
         }
diff --git a/config_creation/manual_config.yaml b/config_creation/manual_config.yaml
index eface00..dfccd62 100644
--- a/config_creation/manual_config.yaml
+++ b/config_creation/manual_config.yaml
@@ -13,6 +13,8 @@ homeassistant:
   name: MyHome
   latitude: 49.369477
   longitude: 10.9831468
+  auth_mfa_modules:
+    - type: totp
 
   customize:
      cover.arbeitszimmer_martin_rollo:
diff --git a/todo b/todo
index 1510017..b28f30f 100644
--- a/todo
+++ b/todo
@@ -1,7 +1,11 @@
-- frontend cards for rooms with light stuff
-    - implement shutter - half open service [ok]
-    - frontend card: use group to set [ok]
-    - add HUE lights to groups [ok]
+- setup two-factor auth
+
+- make public
+    - make new domain ha.bauer.tech
+    - make dockerfile
+    -
+
+
 
 - squeezebox_telnet
     - radio service