New 90-day extension comes as US prepares rules on telcos that pose national security risks