A British firm now lets people log into their bank accounts using emoji — but there’s one potential security flaw