The MGM hack is a great lesson in security