Auditor liable for not including a provision for a third party claim?