What began as a data security concern over defence travel spiralled into a public slugfest between EaseMyTrip and MakeMyTrip