How Microsoft wants to make a billion users' passwords disappear, for good