making the authentication more robust.
fix some potential sql injections
properly encode the get params