fixes injection bug, fixes create user bug

* a non string name no longer crashes the process
* a special character as a name no langer crashes the process
* sql values get escaped correctly
* dates are created by default directive in table definition
0.4.1