In a big win for plaintiffs, a federal judge reinstated class certification of Marriott guests who sued over a 2018 data breach.