How your authentication scheme could hurt your business