A bug in Joe Biden’s campaign app gave anyone access to millions of voter files