Building robust authentication systems with activity-based personal questions.