Why Are We Still Discussing Passwords and What Can the Users Actually Do?