no need to sanitize using cgi (json serializer does the hard work now)