hopefully: queries parameterized on login and register pages, passwords hashed and salted

unfortunately, this is all hypothetical as I can't add a salt field to the employeelist table
someone with a copy of access will have to do that
Merge branch 'webinterface' into securelogin
broke out some global constants, fixed oledbhelper, added pbkdf