update festival controller specs, related factories, and auth rules
merge festivals controller