Hackers built a 'master key' for millions of hotel rooms