No matter how safe you think you've made your networks, if the wrong person gets hold of a user password, it's all worthless. David Ludlow tests authentication methods that keep the bad guys out.