After LinkedIn heist, here's how Microsoft is tightening password security