Added parameterized queries for security

I updated api.py's GET/POST/PUT to use parameterized queries to allow special characters and to prevent SQL injections.  I also updated test.py to include tests for special characters