FacePass ID verification app leaked millions of files including passport photos, selfies and AWS credentials, putting users at risk of identity theft.