correct security and user setup for SQL Server database
I would use Application Roles. See this link http://msdn.microsoft.com/en-us/library/ms190998.aspx
Also, Integrated security is more secure than Mixed Mode, so I would use a domain account, not a SQL account, to avoid having to have 2nd tier authentication enabled.