Sanitize user data being sent to client, begin to separate out model logic from controllert