moved sql query out of show.jsp and into the PatientController.  Also did some minor clean up in the patient controller