FTC toughens children's online privacy act