After so many high-profile data breaches, it’s time developers learned that storing passwords is a really bad idea. And there is a perfectly workable alternative.