Mechanism Design in Defense against Offline Password Attacks