Refactor VenuesController some more

* DRY up #create and #update with #create_or_update
* Move remaining query logic into the model
* Narrow controller->view interface to one ivar
* Extract some private methods and other general cleanup