Blockchain and Identity Rights: GDPR and Passwordless Authentication