The CFPB is turning to Dodd-Frank’s unfinished business