Password Flaws and Hacks - why you need an authenticator