FirstBank added two-factor authentication but the 2FA endpoint is a different route with no session binding. Skip it entirely and go straight to the dashboard.