performance + security enhancements

- user database class format method for sprintf of id column values
- use direct sql in assignment class to check all tests complete