removed mysql_real_escape_string() from user inputs.  Have to figure out how to get that back in.  Also fixed redirect routing on completion of adding new list