Online Learning under Budget and ROI Constraints and Applications to Bidding in Non-Truthful Auctions