Authentication using graphical passwords: effects of tolerance and image choice