Facebook ‘lost’ important rule on dangerous individuals for three years – oversight board