School principal ordered to pay $3.6M for sharing students’ nude pictures online