Marriott to pay $52m in US data breach settlement