sanitize and validate