State audit highlights past security lapses at Holyoke, Chelsea veterans homes