updated with sql
everything
added db.drop_all()
added user to query string
small fixes and GOT RID OF CORS