Microsoft multi-factor authentication system fails to affect a large number of users