Security researcher discovers exposed database on civic engagement platform