Final change for #1375 - move all data out of web-accessible directory.

Title says it all.  There were two json files left; one wasn't being used, the other was moved into the "secure" data directory.

Now that `kalite/static/data` is empty, we no longer need two `DATA_PATH` variables, so I removed one of them.

Finally, I deleted an old command that's not fully formed, and used.