fix(controller): rename destroy() to delete() and call its super()

To ensure that we destroy containers and fleet jobs when deleting an
app, do so in the Django model lifecycle method delete(), not the REST
API-ish destroy() which was not connected to anything.

See https://docs.djangoproject.com/en/1.6/topics/db/models/#overriding-model-methods

Fixes #838.