Facebook bug exposed private photos of 6.8 million users