Switch from mysqli to PDO. Move from normal statements to prepared statements. Needs fixing on insert and update
Externalize hashing of the incoming password