Keyboard apps used by one billion users found to have a flaw that exposes keystrokes