A cyberattack took down Metro's website for two hours. Here's what a cybersecurity expert says