German researchers find ‘flaw’ in Password Checker