validte (most) input and sanitize output