Twitter to pay $150 million to settle with US over privacy, security violations