New user rest APIs

SQL injection problem here