Security researchers have broken Apple's FaceID security system using a mask they said takes around a few days to make and costs only $150.