An IRS employee stole identities and went on a 2-year spending spree