Online shoppers will pay extra to protect privacy, Carnegie Mellon study shows