Facebook bug exposed private photos of 6.8M users to third-party developers