Non-bank mortgage lenders show good risk management but lack wind down planning, FCA finds