Zuckerberg admits mistakes in protecting Facebook users