lastpass lawsuit