get user by email instead of by id

id varies between computers
add simplified sql starting with where
support for sql parameters
update app.config