santize body in controller, not model.