mysql security fixes for root and test db

* remove the test database
* remove the all access to the test_* databases
* set password on root@localhost because root@% is removed.
Are we certain this didn't change in a new version of MySQL? My concern is this will break in one of the SQL variants. I wonder if we should look for both.