You've Been Misinformed About Secure Passwords - Stories From The Trenches