First shot at narrowing scope of GEOSERVER_READ_ONLY in layers/models.py, other fixes for GEOSERVER_PUBLIC_URL