UK election body failed to protect voter data before Chinese cyber attack, says watchdog