Backing WebAuthn, tech giants inch closer to killing passwords