ATMs will soon use fingerprint readers and iris sensors to identify customers. But is biometric authentication as secure as advertised?