Better defence needed: NFL app leaks data