How to build a password security system with human error prevention built in