Why passwords still matter in the age of AI