Adds some more tests. Removes an sql injection possibility (that could have only come from within the code base).
Corrects bad test name