Cryptanalysis of Multiple-Server Password-Authenticated Key