Facebook bug exposes contact information from millions of users