added in password salting and character escaping when doing sql queries