Microsoft reverses course on Edge password handling but denies users were ever at risk