Prevent SQL injection

Fix issue with handshake being specified a invalid user