Most tests have passed except sql injection related