Congress may consider mandatory ISP snooping