sanitize inputs on server end, using django escape method