State auditor says NCDOT has yet to develop trustworthy spen