PayPal suit poses broad threat to CFPB authority