added first name, last name, and username to sanitized params