Of Passwords and People: Measuring the Effect of