Insurers move away from coal, oil and gas but loopholes remain, says new report