Fake Pentagon attack hoax shows perils of Twitter's paid verification