OCR finds compliance issues with university's investigation