Move comes after identities of Iron March members leaked; vacation rental company says it has removed over 1 million for violating discrimination policy launched in 2016