Two college students easily scammed Apple out of almost 1 million