shit for heroku
case matching, xss protection, various things