Switch lighttpd to run as www-data

This makes lighttpd a little safer against remote code execution. Some commands, like uci, are granted via sudo.

Fixes #175.