mysql query escaping and more routes
new node app version, changes on the json