Add the following line in the section below:
##### Advanced server protection rules exceptions -- BEGIN
RewriteRule ^modules/mod_sclogin/ajax/otpcheck.php$ - [L]
That file is necessary to be callable so that our 2-factor authentication check can function when you have that extra security enabled.
I hope that helps!
Alex