security: harden database

[cch5ng]

prevent database write from the console

[cch5ng]

• removed insecure package
• kept search access since that info is public anyhow

[cch5ng]

resource:

• https://www.meteor.com/tutorials/blaze/security-with-methods

[cch5ng]

tested on public deployed site (try to insert fields from console):

• pass