GAO: Medicare HMOs shouldn't have kept money