IRS Commissioner John Koskinen said the agency is working to improve security, but there is only so much it can do with systems that are almost 50 years old.