User data exposed due to flaws in UMANG portal: researchers