Npower customers will have to log in to their accounts on its website after its app was withdrawn following a security breach