CFTC and SEC approve joint final rule governing identity theft