Business-to-business travel consolidator OneFly has left thousands of sensitive passenger records exposed to the open web.