Australia's super funds told to assess authentication controls