Applicants say a DC Bar website bug exposed their personal data and background checks