Nebraska auditor: 'We were held hostage' by state's longtime website provider