Facebook confirms CA findings on user privacy research