'Andyhave3cats' is a better password than 'Shehave3cats,' study finds