RockYou hack shows '123456' remains a top password