New ID cards are supposed to be 'unforgeable' - but it took our expert 12 minutes to clone one, and programme it with false data