Despite red flags, Railway University gave contract to firm of Board member