[RFR] #59  Database queries should use parameter binding

As related into the SL analysis,
we have some security issues with some of our queries.

I have removed demo app from our javascript libraries as:
* they don't need to be versionned
* they have also some security issues

Then, this PR seems huge, that's why I don't have "fixup" all my commits for now.

ping @eric-chau @crouillon for review ;)