Providing authentication services to customers seeking access to confidential data over web-based networks