Don't use a database account with administrator access in live version of API

[species]

As database administrative rights are not needed during normal operation of the API, there should be a non-privileged user which credentials are stored in the running node application.

Maybe we should implement an "initialize" task which has to be run on the first time on installation of the application (admin user supplied via cmdline or ENV), which creates all the databases needed in couch.

So that if the API is compromised from outside, it at least has no administrative access to the DB.

[species]

The initialize process may create a non-priviledged user in this process and automatically add its (random-generated) password to config/local.js