use read only user

sqlpage/sqlpage/sqlpage.json

@@ -1,4 +1,5 @@
 {
+  "database_url": "postgresql://grocery_ro@192.168.0.20/grocery",
   "site_prefix": "/grocery",
   "port": 6772
 }