sanitize inputs more