<p>Customers say the unannounced change also cut off web access that relied on mobile authentication</p>