failover.control and failover.update are broken on HA systems

When disabling failover using the hactl (which uses failover.control) CLI utility, it does not disable HA on the passive controller.

When disabling failover using the webUI (which uses failover.update), it will set both controllers to being the master node.

This is extremely disruptive and essentially breaks HA in an extravagant way.