Facebook accidentally leaks sensitive data to third parties