Loan default? What banks can and can't legally do