facebook vows not to hand over users' medical records to government