auditor liability