Scientists propose overhaul for password prompts