My vote is for http://vanillaforums.com - obviously the software I use to power my site. As for the question of two factor authentication, you could use Google Account using their social connect and use Google's two-factor authenticator to protect you.

The reason I chose Vanilla  is because it's more flexible, better looking and easier to administer than any other option I found.