Handle prism destroy actions better

Shift responsibility of removing child objects to the model
Remove prism lookup on landing page

Info isn't used and it's an expensive lookup
remove stale routes
Fixes for CVE-2014-0130
Merge branch 'master' of github.com:scholarslab/prism