Hegseth had an unsecured internet line set up in his office to connect to Signal, AP sources say