db.py: Did some research on PGSQL string literals. Added E' to the front of string escapes. (For reasons explained in comments, with a link). I think this is now sanitized correctly. Obviously should test more. Was able to add little Bobby Tables to the db ;) Added update_user function.