api docs, expanded css, preventing sql injection on register page