A phishing email mimicking X's real login alerts is making the rounds, and it's designed to steal your password instead of protecting your account. Here's how to spot the fake and what to do if you clicked.