Why COVID-19 makes the case to get rid of passwords