JP Morgan staff told they must share biometric data to access headquarters