fix sanitization, allow more for admins