Note

-Error in url redirection! 
-MYSQL errors are not handled yet (login with invalid username/pass, add
patient with invalid data)
-patient telephone is set to (0) if left blank.
-still don't use session bassed login