removed duplicate sanitizing and used nl2br to handle line breaks