Why and how we hacked a good pass for passbook. Here's what we learned.