removed passwords from globals superglobal and put them in a json file, started to make the manager more secure will need to add logged in validations to sensitive ajax actions,  added a javascript file for the