implemented form input marshalling to prevent priviledge escalation