Locking down an Android device?
There are a number of apps in the market that allow access to apps only after inputting a password.

For your second problem, i hope there's some way of preventing a user from putting a SIM of choice (either by encasing the device in a lockable case or something) and then configuring your WiFi router to only allow access to the site in question and block all other requests.