add sanitize helper, user.logout and readme stuff