The Internal Revenue Service didn’t do enough to verify the identity of callers to its Practitioner Priority Service and Business Specialty Tax phone lines.