Air traffic control chaos that struck British airlines last summer was made worse by delays in verifying a password for an engineer working from home, an inquiry has found.