Implemented OATHservice possibilities into tiqr

escape/validate userid, to avoid api 'sql' injection.