Privacy concerns keep users away from social sign-in