fixed controller sanitize so it can be hidden