Amazon has been criticised for relying on insecure methods for granting access to its sites after users claimed to have forgotten their passwords.