HTC vows to fix Android flaw revealing WiFi credentials