GAO: U.S. can't afford port security costs