Click, wait, repeat: Digital trust erodes one login at a time