Obamacare months behind in testing IT data security: government