Sanitized user input used with link_to method