California risked millions in homeless funds due to poor anti-fraud protections