Alabama providers unlawfully accessed state’s registry to verify employees’ vaccination status, AG says