* Added extra check to avoid SQL injection
* Chenhged js routes to enable testing
* Adding a fieldname check
* Store sessions on db instead of files
* Correct some possible 'SQL injection problems'