Strong Customer Authentication: Three things every merchant needs to know