Watchdog: IRS lax on combating ID theft