The Design of Trustful Authentication from a User Perspective