Facebook kept information on XCheck from its own Oversight Board