UnitedHealth CEO tells lawmakers the company paid hackers a $22 million ransom