California bar entered $3.8M contract with ExamSoft without justifying value, auditor report says