Broken fingers: On the usage of the fingerprint API in Android