Report: CBP paid consultant millions, got little