add xss_clean to post values