The quest of "dethroning" passwords from (web)authentication schemes