db/schema/security.sql:

Revised security.sql:
    - `oq_admin` now is the only user with the ability to delete records, with
      the exception of tables in the `htemp` schema
    - general clean-up and revision of GRANT statements to make them more
      concise and readable
tests:

Fixed a few tests which broke after the security changes to the database
schema.
db/schema/security.sql:

Added a missing GRANT for uiapi.performance; it got removed in faulty rebase.
Merge pull request #1067 from larsbutler/db-security-cleanup

DB security cleanup

[r=matley] [f=*1117052]