Skill-based authentication using cardistry