A new system aims to replace passwords with one that questions your online activity to make sure it is really you.