Update INSTALL.md

Fix GRANT sql statement, add note that customer shouldn't add this manually.