Sounds like a cookie isn't being saved, so they have to enter their 2fa every time instead of having the site trust the browser