Facebook discovers bug that may have affected up to 6.8 million users