Being able to use an old, long-since changed password to log in is not a Windows bug, Microsoft said. Here’s what you need to know.