Blunt truth about authentication: it’s not just about security