Confirmed: Your passwords still suck