Fix crash when deleting ShellSurface objects

We must not leave dangling wl_resource objects with their
user data pointing to a deleted object.

Change-Id: I54aa7f03bc7542fdea144dd0af8da7f600b4d21c
WIP