Remove scaffold Posters controller spec.

This spec will fail after adding authentication, and is covered under
the integration tests anyway.
Add Poster associations and authorization.

Posters now belong to organizations (many-to-one). Many poster actions
are restriced to authenticated and authorized organizational accounts.