Passive consent for clinical research in the age of HIPAA