With GDPR, password security is even more important