A bug in an LA-based medical startup’s website put thousands of COVID-19 test results at risk