App Authentication Evolves in a World of Compromised Credentials