Set up permissions programmatically

[PurkkaKoodari]

We're currently using bootstrap in src/index.js to set permissions at first run using code copied from here. It's a bit hacky.

We should go through the current permissions and update the code so that we have enough permissions.

Additionally, we probably want to move the perms from "Public" to "Authenticated" so that our (non-public, draft) pages aren't queriable without a token.