The case for biometric authentication — and why we should ditch passwords