adding forgotten sanitization for /users/info