What to do about medical identity theft