removed SQL injection from search by scientific name
removed SQL injection from at_parent_ranks
removed SQL injection from nodes and descendants
removed SQL injection from at_ancestor_ranks
added spec for checklist autocomplete