Stop update and create actions from saving twice
Prevent admins from demoting themselves

- Also notify advisor when attempting to propose a new project if
  the advisor hasn't set his / her affiliation or department

- Admins can still demote other admins
Change `submissions` path to `applications`
Use POST to accept or reject submissions

- Remove use of GET for these actions