This is a great idea, and I much prefer using an app to just SMS authentication due to how easy it is to get around SMS authentications. Authy, Google Authenticator, and may others would be great to work with!