why do websites still make you re-enter your entire password when you mess up one tiny character