Security and usability in password authentication