validate userinput in login and sql escaping