Trapdoor Hard-To-Invert Group Isomorphisms and their Applications to Password-based Authentication