keyword adding is now sanitized on the server-side