CFPB orders BofA to pay $10M for illegal garnishments