SEC charges UBS, JPMorgan, TradeStation for identity theft protection lapses