Add poll creation confirmation page, and fix SQL execute statements to use parameters.