Sao Paulo Metro ordered to stop using platform door facial recognition