Random ramblings about passwords, security & authentication