Drop root privileges in container

Through this MR, the image does not run anymore as UID 0, which should improve (perceived) security and remove some nagging by i.e uWSGI.

To be tested:

• If it can be used with the current DB, (may need to chown it to 1000:1000, but please: backup first, test afterwards)