The LastPass Hack and What They’re Doing Right