Huge US facial recognition database flawed: audit