Internet users ditch “password” as password, upgrade to “123456”