Backend refactor - Prod ready feature set

[tomcdona]

• Database migration management - need a method of DB changes that are safe enough for Prod.
  • ATOMIC
  • roll back
  • lineage
• ORM
  • Lots of cursor.execute() calls for SQL work, introduces risks, and missing a lot of sanitization.
  • A good ORM usually comes with db management
• Security
  • mechanism for secret storage
  • XSS prevention
  • likely more