White House orders agencies to make Login.gov the default sign-in for federal websites within 2 years, weeks after congressional auditors said it still hasn’t fixed fraud threats.