several changes
- removed generateCompleteQuery because it wasn't versatile enough and in this manner too prone to sql injections, use https://www.npmjs.org/package/query-sql for that instead
- changed injection protection to allow sql keywords again because they are simply needed for text filtering