Rent-to-own firms 'selling to vulnerable people'