If you use two-factor authentication with GitHub, obviously accessing the API via username+password pair won't work. SourceTree should be able to use the OAuth API; I'd register a token for SourceTree with correct permissions and the app would use it.