A new DOM-clickjacking technique exposes flaws in password managers. Here’s what you need to know to protect sensitive information online.