Disney Vacation Club Website Not Validating User Passwords

At the moment, two-factor authentication codes are the only thing keeping Disney Vacation Club member accounts secure. 

Disney Vacation Club Website