Exploiting Human Factors In User Authentication