Marks and Spencer pauses online orders as firm struggles with cyber-attack