Marriott admits hack exposing "as many as 500 million" travelers