remove additional routes to secure website

I added this pull request and branch to limit your site from being compromised.  In the current state someone, knowing the correct url, can add and delete records from your database of schools.  This stops that from being possible.