A security researcher has discovered an unsecured database on the internet containing millions of two-factor authentication security codes. Here’s what you need to know.