Backend refactor - Prod ready feature set

* Database migration management - need a method of DB changes that are safe enough for Prod.
    * ATOMIC
    * roll back
    * lineage
* ORM
    *  Lots of cursor.execute() calls for SQL work, introduces risks, and missing a lot of sanitization.
    * A good ORM usually comes with db management
* Security 
    * mechanism for secret storage
    * XSS prevention
    * likely more