State auditor finds testing contract oversight lacking