Security flaw in Chrome browser reveals plain-text passwords without authentication