fix suggessions from sensiolabs insight

Connected to the #254  ticket, fix some of the suggested sensiolabsinsight errors
Yeah, -1. The sandbox has a demo function, which has some things that don't comply with how you should create an app. E.g. I'm -1 on use bcrypt too, plain text passwords are far easier for a demo