Updating controller to add SQL injection prevention using cake's utilities