The Consumer Financial Protection Bureau has begun acting to rein in abuse, producing a report critical of the industry and requiring two payday businesses to provide refunds and pay million-dollar fines. The bureau also is drafting rules that could provide further protections for consumers.