Why passwords are a terrible method of authentication