A new study by the Government Accountability Office finds that the IRS mistakenly paid out more than $5.2B to identity thieves.