Lawsuit: Facebook violated consumer privacy laws, agrees to settle