After initial denial, CBSE invited ethical hacker to plug gaps in IT system