ACLU: Employer demands Facebook password