Microsoft turns two-factor authentication into one-factor by ditching password