Police say gunman spent hour in bathroom, possibly assembling rifle, before firing on shoppers, killing three; 'Good Samaritan' praised for using lethal fire to take out shooter