One month after Haiyan, report warns millions at risk in cities