remove direct database calls from web files
clean up user creation