fixed addUser to prevent possible sql injection. modified verifyUser to only check against natively registered users to prepare for google/fb sign in