[WIP] remove request.website

In simplate contexts, `website` is available as a global. It's unpythonic ("one right way") and overcomplicated to have it also available at `request.website`. Instead, we should just pass in the website object wherever we need it.