add ON DELETE CASCADE
rename js file
sanitize string input