restrict database console access

closes #27 (closed)

this should be merged before we hand in the project

i'll leave this as WIP so that we don't accidentally merge it too soon