A little-known law called ERISA bars millions of patients from suing for damages when health insurers wrongly deny claims.