statute of limitations for auditing penalties