Wyndham lawsuit tests FTC's data security enforcement authority