more sanitization for front end submitting