Better sanitizing
Allow underscores for 'college', 'sortby' values