Ditch the password; authenticate users through an sms