fixed sql injection and secret key
plugged the security holes
had to add figaro