Text this: Design and Evaluation of a Shoulder Surfing Resistant Authentication System