ok, I just needed to redirect / and "login" within urls.py so i didn't use "django.contrib.auth.views" which bypassed the two factor... there's probably a better way to do it by i just... edited urls.py as such...
added to top....
from django.views.generic import RedirectView
and edited these two lines to be the following....
urlpatterns = [
......
url(r'^login/$', RedirectView.as_view(url='/account/login/'), name='login'),
......
url(r'^$', RedirectView.as_view(url='/manifests/')),
]