added /basket route
form tag moved to outside
hide password from user details modal
added search functionality

with XSS vulnerability