Sony takes sites down after log-in exploit found