Sanitize string for use as filename