Research shows that passwords created by most people are still bad