HP shipped laptops with a keylogger installed, security firm reveals