Why and How SpiderOak Authenticates Users