AI agents are making unauthorized payments because people are handing over their usernames and passwords.