Report says Metro too easy on prison contractor