Two-factor authentication, webhook signatures, new user management interface, data retention, and more.