Controller Malia Cohen’s office was called out in a new state audit for overpaying staff and then cooking up an odd reimbursement scheme, potentially violating state law. Two managers also worked from Idaho and Alabama and tried to hide it.