remove request.website

In simplate contexts, `website` is available as a global. It's unpythonic ("one obvious way") and overcomplicated to have it also available at `request.website`. Instead, we should just pass in the `website` object wherever else we need it.