Logging into Gmail or Facebook could soon mean plugging in a USB device, potentially making phishing a thing of the past.