Hospitals fail to protect nursing staff from becoming patients