Sanitizing attributes on create and update