New two-factor token lets the blind transact securely online