Fix JpaDropDao#populateBuckets

* Check for the drop source before populating the list
of buckets the drop is in.
Authorize removal of drop from bucket

* Only collaborators or creators of a bucket can remove
a drop from the bucket
Refactor: Remove unnecessary DAO methods