Sharing passwords is a bad idea, yet people still do it