pull out sanitization into it's own method