GAO: Governments Could Do More to Reduce Identity Theft