CorAuth calls the phone on the account after the password is accepted. Press # to approve. A bypass is not a sign-in.