How does passwordless authentication work