Several years after the financial crisis, banks have not completely cleaned up their act, CFPB’s Richard Cordray said.