separate user for the frontend and the wallet #25

I think it's easier to give no permissions on no tables than the right permissions on the right tables. It's just one less thing to worry about when examining the security.