New data standard could expose banks' authentication gaps