The Role of Stronger Authentication in Protecting Rewards Programs