Move all db reads form controllers to models
Add scopes to handle reading from db
Move db calls from views to models
Restrict position routes
Update test to reflect moving find() from controller to model