Only sanitize strings

@ggrossman @rtatsumi 

Params aren't always Strings