Tests show fake explosives got past TSA