In CS 356, we talked about a fourth dimension of Authentication: Something you do. The examples from class were a person's handwriting, walk, voice, etc. Although these border on biometrics and something you are, here is a link to an example of something you could do to authenticate. (Alex Ryan 2-19-16)
Suggest this slide be updated, or add the latest list for comparison. Here is one source: https://nakedsecurity.sophos.com/2016/01/20/these-are-the-25-worst-passwords-of-2015-did-yours-make-the-list/