Patients socked by "surprise" medical bills