remove sqlColumns

now use "sanitize" to sanitize. 
Example:
'select ' + sanitize.array(userInputArray, whitelist).join(', ') + '...'