The Android version of the Slack app may have exposed passwords