Only call stop_executor_cb once on signal

[heifner]

Spring AntelopeIO/spring#1074 is an instance where quit() was called during shutdown which called stop_exectur_cb which tried to access the controller after it was destroyed. Update quit() to not call stop_executor_cb() if it has already been called.