The Scottish Police Authority (SPA) has made progress but concerns remain about its ability to balance its budget and meet longer term strategic objectives.