The Controlled Substance Database allows many doctors, pharmacists and other professionals with access to the database to log in with just a state-issued ID and a four-digit pin, auditors found.