Twitter acknowledges major leak of usernames and passwords