UK Court of Appeal upholds challenge to surveillance law