Hi,

Please consider offering U2F. 

http://googleonlinesecurity.blogspot.nl/2014/10/strengthening-2-step-verification-with.html

It works really well and offers an extra layer of protection against MITM attacks

Jeroen