Conditioned-safe ceremonies and a user study of an application to web authentication