Don't sanitize reservations ids and tokens

sanitizer_text_field removes urlencoded %-based octets, which are
sometimes valuable information. In our case – we have token ids in
Cyrillic.