Add a new unprivileged database user (fxa) and use it for the server

Hmm...it's kinda awkward to hard-code the username here while it's technically configurable at runtime.  I don't see a good solution to that though.