Beginning of the end for withSpace()

In apiRequest(), replaced withSpace() with the much more correct
withRouting().  This (a) doesn't block on a database call, (b) uses
cached user info, and most importantly (c) doesn't actually fetch the
Space into the controller world.  This now actually fits the intended
architecture.  Yay!

Also, streamlined out some structures that are no longer needed due to
Autowire.