Facebook patches security hole that allowed mass harvesting of phone numbers