Using a Personal Device to Strengthen Password Authentication from an Untrusted Computer