Facebook loses facial recognition appeal, must face privacy class action