Millions of Americans buy identity-theft protection, but Consumer Reports' financial experts say it's a waste of money.