Trapdoor Hard-to-Invert Group Isomorphisms and Their Application to Password-Based Authentication