USPS finally fixes website flaw that exposed 60 million users' data