Added account search and SQL Injection

Cashier area has been expanded to search for accounts - this
functionality can be exploited with an SQL Injection.