Efficient two-server password-only authenticated key exchange