Correctly handle controllers RESTful method expectations via _method param

HTML forms work via POST, yet controllers expect PUT/DELETE for edit/delete operations.
Fix by adding _method hidden to forms and removing Delete button from edit form.

I _deleteDialog.gsp only line 20 was inserted, dont know why github shows that as 100% change.