Given a login page with a username, password, and 2FA, how many test cases would you write to ensure it is fully validated?