template: add button to approve prize query
url/view: add PrizeQuery entry
model: update point_add() function
view: add protection for PrizeView