used sanitize on login