Exact Simulation of the First-Passage Time of Diffusions