don't sanitize input in process_args_common - we do it in the CGI callers
allow forward-slash in tzid parameter